Methods and systems that selectively permit changes to a cryptographic hardware unit's state

• US 7,711,953 B2
• Filed: 08/10/2005
• Issued: 05/04/2010
• Est. Priority Date: 08/10/2005
• Status: Active Grant

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Ali, Valiuddin Y., Wang, Lan
• Primary Examiner(s): Barron, Jr.; Gilberto
• Assistant Examiner(s): ALMEIDA, DEVIN E
• Application Number:
  US11/201,008
• Publication Number:
  US 20070038856A1
• Time in Patent Office: 1,728 Days
• Field of Search: 713/164, 713/189
• US Class Current: 713/164
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities

Abstract

In at least some embodiments, a system comprises a hardware unit and a plurality of software agents that couple to and utilize at least one function of the hardware unit. The system further comprises a consensus module coupled to the hardware unit and the software agents. The consensus module is configured to detect an event that changes a state of the hardware unit, notify the software agents of the event before the state changes and selectively permit the state to change based on responses from the software agents.

Claims

1. A system, comprising:

a hardware unit;

at least one computer coupled to the hardware unit, the at least one computer having software agents that utilize a function provided by the hardware unit; and

a consensus module coupled to the hardware unit and the at least one computer, the consensus module is configured to detect an event that changes a state of the hardware unit, notify the software agents of the event before the state changes, and selectively permit the state to change based on responses from the software agents.

2. The system of claim 1 wherein the hardware unit comprises a cryptographic hardware unit.

3. The system of claim 2 wherein the cryptographic hardware unit comprises a Trusted Platform Module (TPM).

4. The system of claim 3 wherein the consensus module is implemented as part of a TPM software stack.

5. The system of claim 1 wherein the event comprises a command that disables the hardware unit.

6. The system of claim 1 wherein the event comprises a command that enables the hardware unit.

7. The system of claim 1 wherein the consensus module comprises a registering component that registers the software agents such that only registered software agents are notified of the event.

8. The system of claim 7 wherein the consensus module comprises a querying component that permits each software agent a predetermined amount of time to respond to being notified of the event before proceeding to query a next software agent.

9. The system of claim 1 wherein the responses are selected from the group consisting of a response that grants permission to changing the state, a response that rejects changing the state and a response that requests a delay before changing the state.

10. The system of claim 9 wherein the consensus module comprises a policy component that enables a user to customize how the responses are considered.

11. A method, comprising:

querying, by a computer, a plurality of software agents regarding an event that changes an operational state of a cryptographic hardware unit; and

selectively permitting, by the computer, changes to the operational state of the cryptographic hardware unit based on responses from the software agents.

12. The method of claim 11 further comprising monitoring a data line to detect the event, the event selected from a group consisting of a command that disables the cryptographic hardware unit and a command that enables the cryptographic hardware unit.

13. The method of claim 11 further comprises registering the plurality of software agents to be notified of the event and to provide a response.

14. The method of claim 11 further comprising transmitting a message to a user based on the responses, the message detailing at least one of the responses and querying the user for instructions.

15. The method of claim 14 wherein selectively permitting changes to the operational state of the cryptographic hardware unit comprises considering responses that give permission to change the operational state, responses that reject changing the operational state and responses that request a delay before changing the operational state.

16. The method of claim 11 further comprising prioritizing the responses based on each software agent'"'"'s ability to disassociate itself with the cryptographic hardware unit.

17. A storage medium having computer-readable instructions that, when executed, cause a computer to:

query a plurality of software agents regarding an event that changes an operational state of a cryptographic hardware unit; and

selectively permit changes to the operational state of the cryptographic hardware unit based on responses from the software agents.

18. The storage medium of claim 17 wherein the computer-readable instructions, when executed, further cause the computer to detect the event and delay changes to the operational state of the cryptographic hardware unit until a predetermined amount of time has passed.

19. The storage medium of claim 17 wherein the computer-readable instructions, when executed, further cause the computer to detect the event and delay changes to the operational state of the cryptographic hardware unit until a predetermined criteria is met.

20. The storage medium of claim 19 wherein the computer-readable instructions, when executed, further cause the computer to adjust the predetermined criteria based on instructions from a user.

21. A system, comprising:

means for notifying a plurality of software agents regarding an event that changes an operational state of a cryptographic hardware unit; and

means for selectively permitting changes to the operational state of the cryptographic hardware unit based on responses from the software agents.

22. The system of claim 21 further comprising means for registering the plurality of software agents to be notified regarding the event before changes to the operational state of the cryptographic hardware unit occur.

23. A system, comprising:

a cryptographic hardware unit;

at least one computer coupled to the hardware unit, the at least one computer having software agents that utilize a function provided by the hardware unit; and

a consensus module coupled to the hardware unit and the at least one computer, wherein the consensus module is configured to detect occurrences of commands that disable the cryptographic hardware unit and commands that enable the cryptographic hardware unit, notify the software agents of each command before the cryptographic hardware unit changes its state, and selectively permit the state of the cryptographic hardware unit to change based on responses from the software agents.